Privacy policy

Short version: we collect the minimum needed to sell you a host and deliver it. No cookies, no tracking pixels, no advertising networks, and we never see your card or bank details.

Who we are

Personifold (we) is operated from India. Contact: help@personifold.com. Questions, complaints and data-rights requests under India's Digital Personal Data Protection Act 2023 go to the same address, and a person answers every one.

What we collect, and why

When you buy a host

Your email address, the host and licence you chose, the price and currency, your licence ID and Razorpay's payment reference. We use them to deliver your pack, send your receipt, handle refunds and disputes, and keep the tax and accounting records the law requires. Legal basis: performing our contract with you, and legal obligation.

Payment details

You pay on Razorpay's own secure page. Card, UPI and bank details go to Razorpay, never to us. Razorpay's use of your data is covered by its privacy policy.

When you join the list

Your email, the exact wording you agreed to, and when. We only add you after you click the confirmation link we email you, and every email we send has an unsubscribe link. Legal basis: your consent, which you can withdraw at any time.

When you send a custom brief

Your email and what you write, so we can reply with options and a quote. Legal basis: steps you asked us to take before a contract.

Security

To stop abuse we count requests per connection. Your IP address is turned into a one-way keyed hash for this and the hash is deleted within minutes; the IP itself is never stored. Our forms use Cloudflare Turnstile to tell people from bots without tracking cookies or puzzles.

What we do not collect

We set no cookies. We run no advertising, tracking or session-recording scripts. If we measure traffic, we use only aggregate, cookieless statistics that do not identify you.

Who processes your data for us

• Cloudflare: hosting, storage, security and Turnstile.
• Razorpay: payments.
• Google (Workspace): sending receipts and confirmation emails, and our inbox.

Each processes data only on our instructions or under its own policy for payments. These providers may process data outside your country, including in the United States and India, under contractual safeguards such as the EU Standard Contractual Clauses where those apply. We never sell or rent your data. We disclose it to authorities only when the law requires.

How long we keep it

• Orders and receipts: as long as tax and accounting law requires (in India, currently up to eight years).
• List subscribers: until you unsubscribe. We then keep only a record that you opted out, so we never email you again.
• Custom briefs: twelve months after our last message, unless they become an order.
• Security hashes: minutes.

Your rights

You can ask for a copy of your data, correction, deletion, restriction, portability, or to withdraw consent. Email help@personifold.com and we will reply within 30 days. We may keep what the law requires us to keep. You can also complain to your data protection authority, or in India to the Data Protection Board of India.

Children

Personifold is not for anyone under 18, and we do not knowingly collect data from children.

Security

Everything is served over HTTPS. Download links are stored only as one-way hashes, payment data never touches our systems, and we keep as little as we can.

Changes

We will update the date above when this policy changes, and email customers about any material change.